Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17-10-2024 17:50
Behavioral task
behavioral1
Sample
2013wangpansssq/2013网盘资源搜索器1.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2013wangpansssq/2013网盘资源搜索器1.0.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
2013wangpansssq/官方网站.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
2013wangpansssq/官方网站.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
2013wangpansssq/帮助.url
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
2013wangpansssq/帮助.url
Resource
win10v2004-20241007-en
General
-
Target
2013wangpansssq/2013网盘资源搜索器1.0.exe
-
Size
1.2MB
-
MD5
3116408e695f67dd22d953ce6b4248a7
-
SHA1
62877f86f5155b7f01ffd73523f6e84969e9b5a8
-
SHA256
2a9d5e11c7ae40dddc117aa0924621a3462b00bcc0df5e72e682ededc57f6591
-
SHA512
ede23d601c78ef11809b8815b34dd6e4dfcf2b703bc30fa58c605c48dd0d614c935aa83e9289235c83257c18acdc2fb7798540c50e43a9998e2e2fab2dd2cea6
-
SSDEEP
24576:O4HuUXs0edKEMo91H9i/ZIDQvq5mZorAplU2FrFy3FbhB1oCTpTPid2fQ8n7:O4HuMs1Knovwq5mZIWr83Fbh3o8iY7
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2480-0-0x0000000000400000-0x000000000048A000-memory.dmp upx behavioral1/memory/2480-1-0x0000000000400000-0x000000000048A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2013网盘资源搜索器1.0.exe